CVE-2005-3735

Summary

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/15510
• http://www.osvdb.org/20998
• http://securitytracker.com/id?1015244
• http://www.vupen.com/english/advisories/2005/2506
• http://www.osvdb.org/20997
• http://secunia.com/advisories/17652
• http://www.osvdb.org/20999

References

• http://www.securityfocus.com/bid/15510
• http://www.osvdb.org/20998
• http://securitytracker.com/id?1015244
• http://www.vupen.com/english/advisories/2005/2506
• http://www.osvdb.org/20997
• http://secunia.com/advisories/17652
• http://www.osvdb.org/20999

• ←Previous
• Next→